Fedora Core 3: 2005-025 Critical: Kernel Memory Corruption Exploit

The kernel package contains the Linux kernel (vmlinuz), the core of any

Linux operating system. The kernel handles the basic functions

of the operating system: memory allocation, process allocation, device

input and output, etc.

CAN-2005-0001

Paul Starzetz from isec.pl found an exploitable hole in the x86

SMP page fault handler which could lead to privilege escalation.

https://www.isec.pl/en/vulnerabilities/isec-0022-pagefault.txt

This update additionally fixes a random memory corruption issue

present in the previous update, and in addition updates to the

latest -ac collection of patches. A full changelog

of the update vs the previous -ac8 based release is available

at https://lkml.org/lkml/2005/1/13/219

- Update to 2.6.10-ac9

- Fix slab corruption in ACPI video code.

* Mon Jan 10 2005 Dave Jones

- Add another Lexar card reader to the whitelist. (#143600)

- Package asm-m68k for asm-ppc includes. (don't ask). (#144604)

577dbd8cabfd0416fe7112b4c96c07f3 SRPMS/kernel-2.6.10-1.741_FC3.src.rpm

2483d17b694756279149f955e0a2ceaf x86_64/kernel-2.6.10-1.741_FC3.x86_64.rpm

19eec5a6827f1285e3249c7a441a970d x86_64/kernel-smp-2.6.10-1.741_FC3.x86_64.rpm

a2c09307259042d1e90b4910ce741999 x86_64/debug/kernel-debuginfo-2.6.10-1.741_FC3.x86_64.rpm

a09e23b469dc0981a054dcbc979429e0 x86_64/kernel-doc-2.6.10-1.741_FC3.noarch.rpm

ef6ec76b36721c6610de383aa6a02631 i386/kernel-2.6.10-1.741_FC3.i586.rpm

d2d41579dd1d90f2454eb8195455d859 i386/kernel-smp-2.6.10-1.741_FC3.i586.rpm

f41ea9b8b4b9ac85a3a690642eb48a3c i386/debug/kernel-debuginfo-2.6.10-1.741_FC3.i586.rpm

c12673b9d5a1ff15058239b0860f250c i386/kernel-2.6.10-1.741_FC3.i686.rpm

0ff39cefcc3511f36597383c1469b05f i386/kernel-smp-2.6.10-1.741_FC3.i686.rpm

35f3b81d0d090b019ec0d76e2df6f47c i386/debug/kernel-debuginfo-2.6.10-1.741_FC3.i686.rpm

a09e23b469dc0981a054dcbc979429e0 i386/kernel-doc-2.6.10-1.741_FC3.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com